Tactical IT Intrusion Portfolio 



FINFIREWIRE 



Technical Surveillance Units and Forensic Experts often face 
a situation where they need to access a running computer 
system without shutting it down in order to prevent data 
loss or save essential time during an operation. In most 
cases, the Target System is protected with a password- 
enabled Screensaver or the target user is not logged in 
and the Login Screen is active. 

FinFireWire enables the Operator to quickly and covertly 

bypass the password-protected screen and access the 
Target System without leaving a trace or harming essential 
forensic evidence. 



Usage Example 1: Forensic Operation 

A Forensic Unit entered the apartment of a Target and 
tried to access the computer system. The computer was 

switched on but the screen was locked. 

As they were not allowed, for legal reasons, to use a Remote 
Monitoring Solution, they would have lost all data byswitch- 
ing off the system as the hard-disk was fully encrypted. 
FinFireWire was used to unlock the running Target 
System enabling the Agent to copy all files before 
switching the computer off and taking it back to Flead- 
quarters. 




Capabilities: • Bypass User Password 

• Covertly Access System 

• Recover Passwords from RAM 

• Enable Live Forensics 




Usage Example 2: Password Recovery 

Combining the product with traditional Forensic 
applications like Encase®, Forensic units used the 

RAM dump functionality to make a snapshot of the 
current RAM information and recovered the Hard-Disk 
encryption passphrase for TrueCrypt's full disk encryp- 
tion. 



Feature Overview 

• Unlocks User-Logon for every User-Account 
Unlocks Password-Protected Screensaver 

• Full Access to all Network Shares of User 

• Dumps full RAM for Forensic analysis 

• Enables live forensics without rebooting the Target System 

• User password is not changed 

Supports Windows, Mac and Linux systems 
Works with FireWire/1394, PCMCIA and Express Card 



For a full feature list please refer to the Product Specifications. 
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Product Components 




FinFireWire - Tactical Unit 

• Complete Tactical System 




Point-and-Click User Interface 

• Easy-to-use User Interface 




Connection Adapter Cards 

• PCMCIA and ExpressCard Adapter for 
Target Systems without FireWire port 




Universal FinWire CableSet 

• 4 pin to 4 pin 

• 4 pin to 6 pin 

• 6 pin to 6 pin 



Usage 




1. Go to your Target System 






4. Select a Target 




2. Start FinFireWire 




3. Plug in FireWire Adapter & Cable 




5. Wait until System 
is unlocked 
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Theinformationcontained herein isconfidential 
and subject to change without notice. Gamma 
Group International shall not be liable for 
technical or editorial errors or omissions 
contained herein. 
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